Privacy policy of NetCero GmbH.
We are happy to welcome you on our website. Below, we would like to inform you about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR). The entity responsible for the data processing described below is listed in the imprint. This privacy policy covers our website netcero.eu; for the NetCero platform (app.netcero.eu), the separate section “NetCero platform (app.netcero.eu)” applies.
We use PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) to analyse usage of this website. Processing happens only after you give consent via the cookie banner, and uses the PostHog EU cloud (eu.i.posthog.com) so all data is processed and stored within the EU. We have concluded a data processing agreement (DPA) with PostHog pursuant to Art. 28 GDPR. PostHog processes the following data, among others:
For our CRM, contact forms and demo booking we use HubSpot (HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA, as well as HubSpot Ireland Ltd., Dublin). HubSpot is used in three roles: (1) the HubSpot tracking script to recognise returning visitors, (2) HubSpot Forms to receive contact requests, and (3) HubSpot Meetings to book demo appointments on the /demo page. These features are activated only after you give consent via the cookie banner. We have concluded a data processing agreement (DPA) with HubSpot pursuant to Art. 28 GDPR, including the EU Standard Contractual Clauses. Data processed includes name, email address, phone number, company, the content of your message, IP address, visitor cookie and the time slot you select.
We use Leadfeeder (Dealfront Finland Oy, Helsinki, Finland, part of Dealfront Group GmbH) to identify which companies visit our website. Your IP address is matched against a database of company IP ranges to attribute the visit to a company — no individual natural persons are identified. Leadfeeder sets a cookie (_lfa) for this purpose. Processing happens only after you give consent via the cookie banner. Leadfeeder hosts in the EU; for some functions, Leadfeeder uses sub-processors in the USA (see “Details on transfer to third countries”). We have concluded a data processing agreement (DPA) with Dealfront pursuant to Art. 28 GDPR. Data processed includes IP address, pages visited, referrer source, date/time and browser/device information.
On our careers page (/en/careers) we show our open positions with a widget from JOIN (JOIN Solutions AG, Eichenstrasse 2, 8808 Pfäffikon SZ, Switzerland). When you open the page, your browser loads the widget from JOIN servers (join.com) and transmits in particular your IP address, browser and device information, and the date and time of the request. The widget sets no cookies and stores no data on your device. JOIN processes this data as our processor under a data processing agreement. The legal basis is our legitimate interest in showing our open positions completely and up to date (Art. 6(1)(f) GDPR). If you apply through JOIN, JOIN also processes your application data as a processor for NetCero GmbH. NetCero GmbH is the controller for this processing.
Webinar recordings and PDF documents that you access after filling in a form are stored with Cloudflare R2 (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). The files are not publicly accessible. After you submit the form, you receive a link that expires after a short time. When you access the file, your browser transmits in particular your IP address, browser information, and the date and time to Cloudflare. Cloudflare processes this data as our processor under its data processing addendum. The legal basis is the provision of the requested content (Art. 6(1)(b) GDPR) and our legitimate interest in secure delivery (Art. 6(1)(f) GDPR).
When you submit the contact form, your name, email address, phone number (if provided), company and the content of your message are transmitted to and stored at HubSpot. We use this data exclusively to handle your inquiry. Legal basis is your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to you (Art. 6(1)(f) GDPR).
We operate subpages on various social networks. When you access one of our subpages, you use the platform of the respective social network provider, which processes your personal data. Some of these providers provide us with collected data in aggregated form as statistics — for information about how your personal data is processed, please contact the respective provider directly.
On your first visit we ask for your consent to non-necessary cookies via a cookie banner. You can change or withdraw your consent at any time via the cookie settings. We distinguish three categories:
This website is hosted at Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in data centres located in Germany. When you access the site, technically necessary server logs (IP address, date/time, requested URL, referrer, user agent) are produced and stored to operate the site and defend against attacks. We have concluded a data processing agreement (DPA) with Hetzner pursuant to Art. 28 GDPR.
All access to this website is routed through Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare acts as a reverse proxy: your request first reaches a Cloudflare location, which passes it on to our server at Hetzner. In doing so Cloudflare processes your IP address, the url requested, the date and time, and browser and device information, in order to repel attacks, identify automated requests and deliver content faster. The legal basis is our legitimate interest in operating the site securely and keeping it available (Art. 6(1)(f) GDPR). Processing takes place under Cloudflare's data processing agreement pursuant to Art. 28 GDPR, including the EU standard contractual clauses. See “Details on transfers to third countries” for the transfer to the United States.
Necessary cookies are processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Analytics and marketing cookies as well as the tracking via PostHog and HubSpot only happen on the basis of your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian TKG 2021). Data submitted via the contact form or demo booking is processed to respond to your inquiry or to carry out pre-contractual measures (Art. 6(1)(b) GDPR).
PostHog Inc. and HubSpot, Inc. are based in the USA. We use PostHog via its EU cloud (eu.i.posthog.com); processing happens in the EU. HubSpot transfers data to the USA; this is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, certification under the EU-US Data Privacy Framework. Hetzner processes exclusively in Germany. Leadfeeder/Dealfront (Dealfront Finland Oy) hosts in the EU. For some functions (data analytics, language models), Leadfeeder uses sub-processors in the USA (Google Cloud, OpenAI, Perplexity AI). This transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). JOIN Solutions AG is based in Switzerland. The European Commission has adopted an adequacy decision for Switzerland (Art. 45 GDPR). According to JOIN, data can also be transferred to service providers in third countries such as the USA. Cloudflare, Inc. is based in the USA; processing in the USA is possible. The transfer is based on the EU-U.S. Data Privacy Framework, with which Cloudflare states it complies, and on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Consents given can be withdrawn at any time with effect for the future — either via the cookie settings on this website or by emailing office@netcero.eu.
If you believe that the way your data is being processed violates the law, you have the right to file a complaint with the competent supervisory authority (in Austria: Datenschutzbehörde, dsb.gv.at) at any time.
When customers use the NetCero platform, we process personal data as a processor on behalf of the respective customer under a data processing agreement (DPA) in accordance with Art. 28 GDPR. The respective customer company is the controller. Data subjects, e.g. users of the platform, should direct their requests to their employer or to the respective customer. We support the customer in this under the DPA.
We use carefully selected sub-processors that are contractually bound in accordance with Art. 28 GDPR. The list of sub-processors is part of the DPA and is available to our customers.
If you connect an external tool (e.g. an AI assistant) to your NetCero account, we transmit data at your instruction and only within the scope of your existing permissions. Further processing in the connected tool is governed by the agreement between you or your company and the tool's provider; we have no influence over it.
This privacy policy was last updated in September 2026.